Analysis

  • max time kernel
    128s
  • max time network
    132s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/08/2024, 13:10

General

  • Target

    err.exe

  • Size

    1.2MB

  • MD5

    b330e10809e737461147a4ede26acc88

  • SHA1

    d8a4f6d26de8ad1435f6fba09646c39f46c3dc60

  • SHA256

    3039cfca0b80a951facc3208c4cfc3f5c648180596948a093b552c4dcace586e

  • SHA512

    acf03f8760a31125c1434948b81ccfa941a796e68b9b1c90c4aabc7ba3eadfc5565184bc202202a8402b94824d2dca0a2bd7022927f7e4fc08305316fcf16b59

  • SSDEEP

    24576:j8Qz17IaUx2PfrdSxcrffD0UpQ1vYGZaBg4JdjfpNphisLbHBhkcBTo7SZtA4DJ2:jBd9Q4VzF0n

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\err.exe
    "C:\Users\Admin\AppData\Local\Temp\err.exe"
    1⤵
    • Suspicious behavior: GetForegroundWindowSpam
    PID:1316

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • memory/1316-0-0x00007FF63B9D0000-0x00007FF63BB6F000-memory.dmp

          Filesize

          1.6MB

        • memory/1316-1-0x00007FF63B9D0000-0x00007FF63BB6F000-memory.dmp

          Filesize

          1.6MB

        • memory/1316-2-0x00007FF63B9D0000-0x00007FF63BB6F000-memory.dmp

          Filesize

          1.6MB